CVE-2005-2482

The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged mode), allows attackers to modify temporary environment variables before the "_Defanged" environment option is checked when processing the Exploit command.

• metasploit metasploit framework 2.0 • metasploit metasploit framework 2.1 • metasploit metasploit framework 2.2 • metasploit metasploit framework 2.3 • metasploit metasploit framework 2.4